Hi Kele,
On 29.05.24 13:53, Kele Masemola wrote:
Good day ,
We are trying to integrate Apache Tomcat with Azure Sentinel, we realized that
the agent that needs to be installed on our Apache Tomcat machines will be
deprecated in August 2024 and as such we would like to find out if there is
another agent that will be provided to Microsoft as part of the Apache Tomcat
data connector on Azure Sentinel?
If there will be a new agent provided, please advise on timeframes of when it
will be available on Azure Sentinel.
If there is no new agent that will be provided from an Apache Tomcat
perspective, could you please advise if the current available agent on Azure
Sentinel will still be able to ingest logs accordingly after it has been
deprecated?
The documentation
(https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/sentinel/data-connectors/apache-tomcat.md)
and your statement ("needs to be installed") looks like this is not a
Tomcat feature, but an extra plugin by Microsoft (in fact, the
documentation lists: "Supported by: Microsoft Corporation".
From that point of view, I don't expect anything to be provided "from
an Apache Tomcat perspective". It has never been provided in the first
place. You might find more information in Microsoft's statements about
the deprecation of their own component, and what they recommend to use
instead.
(Somebody correct me if I'm wrong and there's something on the roadmap,
or already in and I've missed it)
Olaf
